Privacy Policy

Information We Collect

How We Use Your Information

We use your information for the following purposes:

Legal Basis for Processing (GDPR & UK GDPR)

For users in the European Economic Area (EEA), United Kingdom, and Germany, we process your data based on the following legal grounds:

Data Sharing and Disclosure

We may share your information with third parties in the following circumstances:

Data Security

We implement industry-standard technical and organizational security measures to protect your personal information:

• Encryption of data in transit (TLS/SSL) and at rest
• Regular security audits and vulnerability assessments
• Access controls and authentication mechanisms
• Secure data centers with physical and digital safeguards
• Employee training on data protection and security practices

However, no method of transmission over the internet or electronic storage is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.

Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law.

Typical retention periods:

• Account data: Until account deletion or 3 years of inactivity
• Learning progress data: Duration of active subscription plus 1 year
• Payment records: 7 years for tax and accounting purposes
• Marketing communications: Until you opt-out or 2 years of inactivity
• Technical logs: 90 days

Children's Privacy

Our services are not directed to children under 13 years of age (or 16 in the EEA/UK). We do not knowingly collect personal information from children. If you believe we have inadvertently collected information from a child, please contact us immediately at privacy@germanmethod.com, and we will promptly delete such information.

International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence, including the United Arab Emirates, European Union, United States, and other jurisdictions where our service providers operate.

These countries may have different data protection laws. We ensure appropriate safeguards are in place for such transfers, including:

• Standard Contractual Clauses (SCCs) approved by the European Commission
• Adequacy decisions by relevant data protection authorities
• Binding Corporate Rules and other approved transfer mechanisms

Cookies and Tracking Technologies

We use cookies, web beacons, and similar tracking technologies to:

• Remember your preferences and settings
• Analyze app usage, performance, and user behavior
• Deliver personalized content and targeted advertising
• Provide security and fraud detection

You can control cookies through your browser settings. Note that disabling cookies may affect the functionality of our services. For mobile apps, you can manage tracking through your device settings.

Third-Party Links and Services

Our services may contain links to third-party websites, applications, or services. We are not responsible for the privacy practices of these external sites. We encourage you to review their privacy policies before providing any personal information. This Privacy Policy applies only to information collected by German Method.

California and U.S. Privacy Rights (CCPA/CPRA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA):

• Right to know what personal information is collected, used, shared, or sold
• Right to delete personal information
• Right to opt-out of the sale or sharing of personal information
• Right to correct inaccurate personal information
• Right to limit use of sensitive personal information
• Right to non-discrimination for exercising your privacy rights

We do not sell personal information as defined by CCPA. We may share personal information for targeted advertising purposes, which you can opt-out of by contacting privacy@germanmethod.com.

UAE Data Protection Compliance

As a company registered in the United Arab Emirates, we comply with UAE data protection regulations, including the UAE Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data.

We process personal data lawfully, fairly, and transparently, and ensure that data is collected for specified, explicit, and legitimate purposes. Data subjects in the UAE have rights to access, correct, delete, and restrict processing of their personal data.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of any material changes by:

• Posting the updated Privacy Policy on this page
• Updating the "Last updated" date
• Sending you an email notification (for significant changes)
• Displaying an in-app notification

Continued use of our services after changes constitutes acceptance of the updated policy. We encourage you to review this Privacy Policy periodically.

Supervisory Authority

If you are located in the European Economic Area (EEA), United Kingdom, or Germany, you have the right to lodge a complaint with your local data protection supervisory authority if you believe our processing of your personal data violates applicable law.

Examples of supervisory authorities:

• Germany: Bundesbeauftragter für den Datenschutz und die Informationsfreiheit (BfDI)
• UK: Information Commissioner's Office (ICO)
• UAE: UAE Data Office